General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 2185 Views
  • 0 replies
  • 0 Likes

PAN-OS 5.0.6 SNMP

server:~ leo$ snmpget -M /usr/share/snmp/mibs -m ALL -Pu -v3 -a SHA -A xxxxxxx -l authPriv -u nagios -x AES -X xxxxxxx 10.48.1.10 `snmptranslate -On PAN-COMMON-MIB::panSessionMax`

PAN-COMMON-MIB::panSessionMax = No Such Instance currently exists at th

...

Teamviewer application not allowed by policy

I'm encountering a strange situation where teamviewer is not allowed by the policy in which it is defined but is instead blocked by my clean up rule.

I have all the dependencies matched but for some reason the firewall does not match on the rule where

...

tajman by L1 Bithead
  • 6611 Views
  • 4 replies
  • 0 Likes

Resolved! 6.0.4 group mapping issue?

I started running into this group mapping issue after update a client to 6.0.4.

We have a policy which matches on an Active Directory group for SSLVPN and what they can access. The same A.D. group is used in the Kerberos authentication profile to aut

...

SDorsey by L4 Transporter
  • 2480 Views
  • 1 replies
  • 1 Likes

Policy schedule end notification

I have a policy scheduled to run for 50 days, is there a way to get a notification at the end of the schedule time period when the policy goes inactive/disabled?

jlg by L0 Member
  • 2731 Views
  • 4 replies
  • 0 Likes

Agentless User ID problems with IPv6

We are using an agentless user id system with four domain controllers. IPv4 and IPv6 is used inside and outside our organization. The PA box fails to identify users that run IPv6. Turning off IPv6 on the Windows clients fixes the problem. The problem

...

rlawsha by L1 Bithead
  • 2857 Views
  • 4 replies
  • 0 Likes

Dropbox Uploaders

I've noticed that when using the dropbox basic uploader the filenames are logged under data filtering correctly however when you drag and drop files into dropbox the filename is recorded as "chunked_upload".

Is there a way to figure out the actual fil

...

depps by L1 Bithead
  • 3290 Views
  • 2 replies
  • 0 Likes

Palo Alto support Windows Server 2012 R2?

Hi,

At this moment we user Userd-ID agents on our WIndows Server 2008 R2 AD servers. But we want to upgrade all the servers to Windows Server 2012 R2. Does Palo Alto already support userd-ID agents on Windows Server 2012 R2 and what firmware needs to

...

ZEBIT by L3 Networker
  • 3377 Views
  • 4 replies
  • 0 Likes

HA Split Brain After Upgrade from 5.0.8 to 6.0.3

We have a pair of 5050s that we recently tried to upgrade, however we ran into an issue where once both of the PANs were upgraded they went into split brain. Its currently setup with some basic HA active/standby settings for 5.0. so I'm not sure why

...

Palo GUI: Selecting lines (Multiselect)

Hello,

I would like to put 20 FQDN Names in a Group ir directly in a policy.

AAAA1

AAAA2

AAAA3

AAAA4

....

AAA20

You know what I mean, it takes a long time :=(( ... or there is a way how to select more names I do not know.

Roman

rkra by L2 Linker
  • 3401 Views
  • 5 replies
  • 0 Likes

QoS on a sub interface

I see from previous discussion, QoS on a sub interface has been a request.  I have a 3050 I'm working with and was wondering if there are any updates?

tharpham by L1 Bithead
  • 3809 Views
  • 5 replies
  • 0 Likes

Resolved! How to REJECT instead of DROP?

Try as I might, I cannot find a way to do the equivalent of the venerable iptables target REJECT --with-icmp-ureachable or --with-tcp-reset for basic firewalling on a 4020.


This is handy for bouncing internal clients quickly, whereas DROP is better to

...

Priyan by Not applicable
  • 18596 Views
  • 11 replies
  • 1 Likes
  • 24251 Posts
  • 119 Subscriptions
Top Solution Authors
Top Liked Authors
Labels